Search Your Email: The Black Star Wear Breach Exposed 206,412 Accounts

In June 2025, a dataset tied to Black Star Wear, the official e-commerce platform for Russian streetwear brand owned by hip-hop artist Timati, was posted on a prominent hacking forum. The breach affected 206,412 users, and what makes this incident stand out is not just the volume, but the richness of the exposed data. Full names, phone numbers, IP addresses, order histories, and geographic locations were all included alongside MD5 password hashes. For targeted phishing and identity theft, this is close to a complete profile of every affected customer.

Why This Is Dangerous

MD5 password hashes sound technical and secure, but they are not. MD5 is a decades-old algorithm that security researchers have considered broken for years. Attackers with modern hardware can crack common MD5 hashes in seconds using precomputed lookup tables called rainbow tables. Combined with the full names, phone numbers, and purchase histories also in this dump, an attacker does not just have a cracked password, they have everything needed to impersonate a customer, pass security questions, and convince support teams to reset accounts. The combination of PII and weak hashing is what elevates this breach beyond a routine credntial dump.

What Was Exposed

• 206,412 total user records
• Email addresses and phone numbers
• First and last names of customers
• IP addresses and geographic locations
• MD5 password hashes (easily crackable)
• Order details and purchase history
• Dataset posted on a hacking forum on June 14, 2025
• Source country: Russian Federation

Why This Matters

E-commerce breaches carry a category of risk that purely credential-based breaches do not. When order details and purchase history are included in a dump, attackers can craft highly convincing phishing messages referencing real transactions. A message saying "there is a problem with your recent order" that includes accurate order informaton is far more likely to succeed than a generic lure. For Black Star Wear customers, this breach creates a persistent social engineering risk that does not go away after a password change.

How Database Breaches Work

Database breaches occur when attackers gain unauthorized access to a company's backend systems, typically through SQL injection, stolen admin credentials, or unpatched software vulnerabilities. Once inside, they export the user database and post it on hacking forums, either for sale or as a free dump. The data may circulate privately for months before becoming public, meaning affected users often have no idea their information is already in circulation. The use of MD5 hashing, rather than modern algoritms like bcrypt or Argon2, indicates the Black Star Wear platform was not following current security best practices at the time of the breach.

Check If You Are Affected

HEROIC's free dark web scanner checks your email address against more than 400 billion leaked records, including the Black Star Wear database and thousands of other breaches from hacking forums worldwide. If your name, email, or phone number appeared in this dump, you will see it immediately. Search your email now and find out exactly what data tied to you is already in the hands of threat actors.